Forum Discussion
Autopilot Resett and MFA for Device Registration
MFA is enforced over CA-Policy for Device Registration. When we apply an autopilot-resett via Intune admin center, the assigned user must login again and perform MFA after autopilot Provisioning. Ot...
Just wondering but are you using WIndows hello/requiring Windows hello as that holds the mfa claim.. and with it your users wont be prompted for it
I see in eventlog:
Event ID 212: MDM Session: Failed to get AAD Token for sync session User Token: (Unknown Win32 Error code: 0xcaa10001) Device token (unsupported feature)
Event ID 212: MDM Session: Failed to get AAD Token for sync session User Token: (Unknown Win32 Error code: 0xcaa10001) Device token (unsupported feature)